Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier: lZWk7VGm2lMWAZpEu8H/Hu09Q4BvO/2oVNYs3wry1Y0=
Subject key identifier: C1:91:95:23:2F:5C:99:52:25:7A:38:4C:A3:91:D9:6F:DB:7D:BF:FA
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial: 019A71B7D4296AA0D78E39D6E30673CCFB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: eud1Yjw0xfSvBGGBmcWARVPOxzAEJ4UiLbUFdx0PYM4=)
2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d4:29:6a:a0:d7:8e:39:d6:e3:06:73:cc:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=c19195232f5c9952257a384ca391d96fdb7dbffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:67:0c:83:72:79:7f:82:8c:55:81:e1:3b:
09:af:05:7e:a6:ac:48:70:16:35:c8:22:c4:c3:83:
93:3a:9e:65:56:bc:ce:e9:76:2a:ea:eb:a9:e4:ee:
58:6d:96:19:0c:91:1f:87:d2:cb:6b:18:94:b4:ac:
72:f0:54:db:bf:88:8d:32:1f:22:fd:c9:cc:a0:93:
f7:65:55:4c:af:76:30:eb:92:26:0e:84:1c:d8:01:
c7:3e:df:c6:3b:3b:df:10:45:76:1b:9a:85:1a:d0:
a6:6c:53:d6:be:c4:44:f6:6e:85:53:68:ea:b4:3d:
44:49:54:e7:3a:2f:48:c3:d4:50:79:d6:72:c3:fb:
9f:94:43:81:2d:08:21:42:73:5d:0b:ba:6b:54:4a:
9e:02:57:09:9d:97:e1:34:dd:fb:83:d3:f1:d6:fa:
83:c9:f0:5d:4e:50:20:15:bf:a2:96:ca:39:b4:6e:
a4:64:a8:29:74:74:f7:4b:16:a2:06:f6:a7:9b:c3:
68:3d:53:60:8e:b4:e3:05:1f:cd:cd:84:c3:d3:f1:
8e:bc:83:39:3f:b7:63:af:ad:b6:05:65:6e:83:b5:
cd:4d:ab:40:8c:0a:27:a9:e7:8b:de:b4:fb:f9:6d:
0e:b3:35:d5:1c:7c:c9:35:17:13:f0:b7:37:00:37:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:91:95:23:2F:5C:99:52:25:7A:38:4C:A3:91:D9:6F:DB:7D:BF:FA
X509v3 Authority Key Identifier:
keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fc:63:df:8a:7d:6a:db:ee:59:0e:06:24:e1:12:0d:c1:8d:
38:fa:9b:4e:09:59:e6:84:e2:f2:0a:bf:5f:78:57:3f:24:86:
0e:63:7e:39:05:93:13:07:b2:df:25:b0:be:5e:8d:0c:3c:b2:
18:08:c1:ac:70:58:c6:ae:2a:8c:e6:24:20:fb:b6:cb:1d:73:
a9:42:65:e5:bc:04:a9:83:79:f4:97:45:19:72:31:02:18:b2:
e0:e2:52:55:4e:67:ef:52:c4:21:ce:30:b7:20:76:b7:06:59:
38:09:a1:2a:be:67:dd:1f:59:8f:b7:47:8f:2b:fe:2f:e8:20:
8b:5a:5b:07:95:07:b8:5d:83:eb:15:d9:28:31:9a:3d:5e:c7:
bb:aa:85:4f:17:be:1c:54:6b:a5:b8:04:86:3b:51:76:4a:87:
9c:a5:1c:bf:df:fd:29:ab:08:c5:a7:b9:92:11:12:1e:b1:68:
78:2a:cc:3e:ce:56:f8:cb:ab:d9:d5:60:fb:90:d0:65:b1:70:
ad:01:1e:ad:fa:d2:bd:ee:5d:fa:91:66:1e:37:07:dd:23:c4:
64:a5:83:0d:f3:21:ba:50:16:d1:f9:d7:09:be:61:f8:b6:63:
d1:cc:a7:bf:5b:75:f8:96:aa:d1:ad:47:f1:2a:8b:5c:ea:9d:
71:1a:79:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9QpaqDXjjnW4wZzzPuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMGJkMGVhOTVhMTkwYzcwM2E4NWUwOWViYzVlNWZkYTVj
ZGNlMzIwHhcNMjUxMTExMDcwMTAzWhcNMjUxMTEyMDcwMTAzWjAzMTEwLwYDVQQD
EyhjMTkxOTUyMzJmNWM5OTUyMjU3YTM4NGNhMzkxZDk2ZmRiN2RiZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJhnDINyeX+CjFWB4TsJrwV+pqxI
cBY1yCLEw4OTOp5lVrzO6XYq6uup5O5YbZYZDJEfh9LLaxiUtKxy8FTbv4iNMh8i
/cnMoJP3ZVVMr3Yw65ImDoQc2AHHPt/GOzvfEEV2G5qFGtCmbFPWvsRE9m6FU2jq
tD1ESVTnOi9Iw9RQedZyw/uflEOBLQghQnNdC7prVEqeAlcJnZfhNN37g9Px1vqD
yfBdTlAgFb+ilso5tG6kZKgpdHT3SxaiBvanm8NoPVNgjrTjBR/NzYTD0/GOvIM5
P7djr622BWVug7XNTatAjAonqeeL3rT7+W0OszXVHHzJNRcT8Lc3ADd8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGRlSMvXJlSJXo4TKOR2W/bfb/6MB8GA1UdIwQY
MBaAFO4L0OqVoZDHA6heCevF5f2lzc4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wZDVkOWYtNTgwOC00ODcxLWEyNGQt
YmViZGY0Y2Q0ODViLzEvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wZDVkOWYtNTgwOC00ODcxLWEyNGQtYmViZGY0Y2Q0ODVi
LzEvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPxj34p9
atvuWQ4GJOESDcGNOPqbTglZ5oTi8gq/X3hXPySGDmN+OQWTEwey3yWwvl6NDDyy
GAjBrHBYxq4qjOYkIPu2yx1zqUJl5bwEqYN59JdFGXIxAhiy4OJSVU5n71LEIc4w
tyB2twZZOAmhKr5n3R9Zj7dHjyv+L+ggi1pbB5UHuF2D6xXZKDGaPV7Hu6qFTxe+
HFRrpbgEhjtRdkqHnKUcv9/9KasIxae5khESHrFoeCrMPs5W+Mur2dVg+5DQZbFw
rQEerfrSve5d+pFmHjcH3SPEZKWDDfMhulAW0fnXCb5h+LZj0cynv1t1+Jaq0a1H
8SqLXOqdcRp5oQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:30 2025 by rpki-client